Does this skill support modern PHP standards like PSR-4?

Yes, the skill includes templates for PSR-4 namespaced architectures and Composer integration, alongside traditional Simple and OOP patterns.

Can I use this for plugins hosted on GitHub instead of WordPress.org?

Absolutely. It includes specific guidance and code patterns for implementing auto-updates for plugins hosted on GitHub, GitLab, or BitBucket using Plugin Update Checker.

How does this skill handle WordPress security?

It enforces the 'Security Trinity': sanitizing inputs, validating logic, and escaping outputs, while requiring nonces for all form and AJAX submissions.

Is it compatible with the latest WordPress versions?

Yes, it is optimized for WordPress 6.7+ and PHP 8.0+, ensuring compatibility with modern block editor features and the latest PHP performance improvements.

How do I prevent SQL injection using this skill?

The skill strictly mandates the use of $wpdb->prepare() with proper placeholders (%s, %d, %f) for every database query involving user-supplied data.

WordPress Plugin Core

Name: WordPress Plugin Core
Author: secondsky

bysecondsky

•

Content Management

Develops production-ready, secure WordPress plugins using modern PHP standards and industry best practices.

About

WordPress Plugin Core is a comprehensive skill designed to guide Claude in building robust WordPress plugins or auditing existing codebases. It enforces strict security standards, including SQL injection prevention via $wpdb->prepare(), CSRF protection with nonces, and proper data sanitization and escaping. The skill supports multiple architectural patterns—ranging from simple functional setups to modern PSR-4 namespaced structures with Composer. It provides production-grade implementation patterns for Custom Post Types, REST API endpoints, and automatic update integration via GitHub, ensuring all generated code follows the official WordPress Coding Standards.

Key Features

GitHub-based auto-update workflow integration
REST API and AJAX handler implementation with permission checks
Strict security enforcement for SQLi, XSS, and CSRF prevention
Standardized Custom Post Type and Taxonomy registration
Support for Simple, OOP, and PSR-4 architectural patterns
21 GitHub stars

Use Cases

Building feature-rich WordPress plugins with custom database tables and settings
Auditing and patching security vulnerabilities in legacy WordPress code
Modernizing functional plugins into scalable, namespaced architectures

About

Key Features

GitHub-based auto-update workflow integration
REST API and AJAX handler implementation with permission checks
Strict security enforcement for SQLi, XSS, and CSRF prevention
Standardized Custom Post Type and Taxonomy registration
Support for Simple, OOP, and PSR-4 architectural patterns
21 GitHub stars

Use Cases

Building feature-rich WordPress plugins with custom database tables and settings
Auditing and patching security vulnerabilities in legacy WordPress code
Modernizing functional plugins into scalable, namespaced architectures